In libming 0.4.8, there is a use-after-free in the decompileJUMP function of the decompile.c file.
libming libming 0.4.8
debian debian linux 7.0